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Claims 



1. A method for protecting an identifier of a subscriber, 
during data transfer between a service provider and a content 
provider, when said subscriber sends a request to said service 
provider to obtain data belonging to said content provider, 
said method comprising the steps of: 

- upon reception of said subscriber request by said service 
provider : 

- computing an encrypted token using said identifier of 
said subscriber; and, 

- transmitting said subscriber request and said encrypted 
token to said content provider; 

- upon reception by said service provider of a certifica- 
tion request comprising an encrypted token, sent by said 
content provider: 

- extracting said encrypted token from said certification 
request ; 

- decrypting said extracted encrypted token to determine 
said subscriber identifier; 

- checking said determined subscriber identifier; and, 

- transmitting a success or failure indication to said 
content provider in response to said certification request; 

- upon reception of said data belonging to said content 
provider by said service provider, transmitting said data 
belonging to said content provider to said subscriber . 

2. The method of claim 1, further comprising the step of 
verifying rights of said subscriber, wherein said steps of 
computing an encrypted token and transmitting said subscriber 
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request and said encrypted token to said content provider are 
done only if said subscriber holds corresponding rights. 

3. The method of claim 1 further comprising the step of 
memorizing said encrypted token so that it can be reused 
without having to be recomputed. 

4. The method of claim 1 further comprising the step of charg- 
ing said subscriber if said determined subscriber identifier 
is certified. 

5. The method of claim 1 further comprising the step of 
formatting said data belonging to said content provider. 

6. The method of claim 1 wherein said step of computing an 
encrypted token using the identifier of said subscriber 
comprises the steps of : 

- concatenating said identifier of said subscriber with a 
random or time varying value using a separator; and, 

- encrypting said concatenation using either a symmetric or 
an asymmetric encryption algorithm. 

7. The method of claim 1 wherein said certification request is 
a SOAP request. 

8. The method of claim 1 implemented using web service 
technology. 

9. An apparatus comprising means adapted for carrying out the 
method according to claim 2. 

10. A computer-like readable medium comprising instructions 
for carrying out the method according to claim 2 . 



